plugin-sbom-javascript

Secure your software empower your team.

CodeClarity Plugin - SBOM

Contributing

If you'd like to contribute code or documentation, please see CONTRIBUTING.md for guidelines on how to do so.

Reporting Issues

Please report any issues with the setup process or other problems encountered while using this repository by opening a new issue in this project's GitHub page.

Purpose

The sbom service creates an inventory of dependencies of an application's source code directory.

It is the first stage of the Software Composition Analysis process.

1. Identify dependencies (SBOM)
2. Identify known vulnerabile dependencies (This service)
3. Identify licenses & license compliance
4. Compute and verify upgrades to the application

Current Features

1. Identifies package-managed dependencies

Future Features

1. Identify self-managed dependencies (script tags, library files, etc...)

Dev Usage

To execute this service for development purposes, two paramters need to be supplied to the IDE or terminal:

Usage of sbom-js:
  -output-file string
    	Absolute Path to the output file (Required)
  -source-code-directory string
    	Absolute Path to the source code directory (Required)